GHSA-r8vh-cm9f-rc29MediumCVSS 6.1

Magmi XSS Vulnerability

Published
May 17, 2022
Last Modified
September 14, 2023

🔗 CVE IDs covered (1)

CVE-2017-7391 →

📋 Description

A Cross-Site Scripting (XSS) was discovered in Magmi 0.7.22. The vulnerability exists due to insufficient filtration of user-supplied data (prefix) passed to the magmi-git-master/magmi/web/ajax_gettime.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.

🎯 Affected products1

  • composer/dweeves/magmi:<= 0.7.22

🔗 References (6)